$ rpki-client -vvf rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233352e302f32342d3234203d3e20323733343930.roa File: 3230302e3232392e3233352e302f32342d3234203d3e20323733343930.roa (raw, json) Hash identifier: uB/LCkl4gP4mZKHWbIwL5pzVQqj6TOgGwXugP1ZvtTg= Subject key identifier: 90:E9:19:3E:D5:3A:4E:53:A5:2C:EB:35:9E:26:8E:FA:DE:DD:CF:CD Certificate issuer: /CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Certificate serial: 3AE64400F792DB37E66BA79C24DCA2E3142D369C Authority key identifier: 91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject info access: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233352e302f32342d3234203d3e20323733343930.roa Signing time: Fri 20 Feb 2026 12:32:59 +0000 ROA not before: Fri 20 Feb 2026 12:27:59 +0000 ROA not after: Fri 19 Feb 2027 12:32:59 +0000 asID: 273490 IP address blocks: 200.229.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.mft rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 03 Mar 2026 09:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e6:44:00:f7:92:db:37:e6:6b:a7:9c:24:dc:a2:e3:14:2d:36:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207 Validity Not Before: Feb 20 12:27:59 2026 GMT Not After : Feb 19 12:32:59 2027 GMT Subject: CN=90E9193ED53A4E53A52CEB359E268EFADEDDCFCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:6b:08:8e:4c:91:1f:f2:1f:fa:39:3e:7a: f5:ce:f2:e0:7f:bd:fd:1f:ed:de:53:a3:ee:9d:cb: 68:b2:79:11:49:c1:85:b4:1f:35:4e:e0:da:d8:50: 6b:a5:23:0b:5c:d8:c1:c5:a1:c3:21:75:e8:f5:94: a1:70:e2:27:a9:58:f3:76:d5:48:cc:98:cf:f4:32: de:ee:c2:51:32:67:b3:45:68:96:6c:46:c6:a0:78: a4:5e:98:0d:d7:d5:bb:50:e4:cd:4b:90:c2:77:fa: dd:9c:58:d0:e1:40:b1:66:94:12:b6:49:71:14:25: 10:b6:b3:29:8f:8e:91:8d:a7:28:eb:9a:bf:b6:47: 09:df:59:18:83:b8:4b:f6:63:15:3e:f7:5f:53:d9: 84:b5:eb:1f:12:fe:72:5a:dc:c0:7f:74:00:9b:60: e3:b3:ff:41:b1:86:66:2f:06:5b:03:dd:5c:f5:1d: 40:96:66:4c:a0:ac:3d:59:2e:d6:14:cf:19:40:ef: c8:9e:ac:7f:8c:76:25:bf:89:46:26:7c:91:33:3d: 0d:52:f0:26:5a:22:bf:08:45:4d:d3:a9:be:c4:42: 84:55:db:49:b9:d8:8b:da:8a:98:27:99:19:f6:1d: 2a:d9:2a:88:8a:64:ab:7b:00:79:2c:76:57:69:b6: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:E9:19:3E:D5:3A:4E:53:A5:2C:EB:35:9E:26:8E:FA:DE:DD:CF:CD X509v3 Authority Key Identifier: keyid:91:60:1A:9E:F5:E0:DA:5D:0C:15:2E:CB:7F:E2:3C:87:55:CB:C2:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/91601A9EF5E0DA5D0C152ECB7FE23C8755CBC207.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApPpXRRcuG9Q1mXqxzQxHKo3up8WUt3t4V4EmyxtDnJj/0/3230302e3232392e3233352e302f32342d3234203d3e20323733343930.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.229.235.0/24 Signature Algorithm: sha256WithRSAEncryption 11:3d:0e:ae:9b:90:4d:21:f0:43:59:e5:91:7f:4b:b4:34:0f: 3a:ba:f3:d1:b0:43:ea:a0:01:29:15:66:15:1a:fa:ab:68:a7: f0:f3:3d:28:87:fa:bd:12:5c:60:d2:38:59:ee:34:f0:b1:0f: d4:dd:9a:b1:9c:83:ba:fd:e8:ad:76:6a:72:d0:c6:e8:d8:e6: 16:b2:ff:6a:ff:24:d0:e3:47:82:9b:29:3b:4b:42:9a:f2:02: 09:87:8b:00:97:ff:0a:ef:e5:a9:f4:8c:82:64:49:15:95:9c: 73:01:85:4a:7f:59:89:fb:69:3f:48:d9:cb:7b:65:1d:c2:1b: c1:cb:3f:2d:62:7d:44:0f:26:30:c8:2a:f7:77:a3:49:68:17: 8d:62:0a:83:45:0c:13:c7:78:44:26:a2:7f:4a:c1:9c:55:77: 9e:5b:12:e0:66:5a:02:92:3d:f1:83:84:01:a4:47:d2:3e:c9: a2:76:80:13:f4:d2:2c:9a:d1:5b:c0:e9:f2:df:c6:e2:d4:b5: 5d:a1:fc:99:5e:90:91:da:51:cf:26:3c:eb:96:36:2f:41:a4: 15:77:39:6a:a2:b4:18:83:6d:51:98:cf:fa:36:ce:99:ac:c7: 9d:c9:3f:94:76:50:4b:e5:91:46:f3:59:4e:89:11:0b:53:6f: c1:b1:e1:6f -----BEGIN CERTIFICATE----- MIIFSTCCBDGgAwIBAgIUOuZEAPeS2zfma6ecJNyi4xQtNpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2MDFBOUVGNUUwREE1RDBDMTUyRUNCN0ZFMjNDODc1 NUNCQzIwNzAeFw0yNjAyMjAxMjI3NTlaFw0yNzAyMTkxMjMyNTlaMDMxMTAvBgNV BAMTKDkwRTkxOTNFRDUzQTRFNTNBNTJDRUIzNTlFMjY4RUZBREVERENGQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmiGsIjkyRH/If+jk+evXO8uB/ vf0f7d5To+6dy2iyeRFJwYW0HzVO4NrYUGulIwtc2MHFocMhdej1lKFw4iepWPN2 1UjMmM/0Mt7uwlEyZ7NFaJZsRsageKRemA3X1btQ5M1LkMJ3+t2cWNDhQLFmlBK2 SXEUJRC2symPjpGNpyjrmr+2RwnfWRiDuEv2YxU+919T2YS16x8S/nJa3MB/dACb YOOz/0GxhmYvBlsD3Vz1HUCWZkygrD1ZLtYUzxlA78ierH+MdiW/iUYmfJEzPQ1S 8CZaIr8IRU3Tqb7EQoRV20m52IvaipgnmRn2HSrZKoiKZKt7AHksdldptkCdAgMB AAGjggJTMIICTzAdBgNVHQ4EFgQUkOkZPtU6TlOlLOs1niaO+t7dz80wHwYDVR0j BBgwFoAUkWAanvXg2l0MFS7Lf+I8h1XLwgcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy L3JlcG8vQXBQcFhSUmN1RzlRMW1YcXh6UXhIS28zdXA4V1V0M3Q0VjRFbXl4dERu SmovMC85MTYwMUE5RUY1RTBEQTVEMEMxNTJFQ0I3RkUyM0M4NzU1Q0JDMjA3LmNy bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzkxNjAxQTlFRjVFMERBNUQw QzE1MkVDQjdGRTIzQzg3NTVDQkMyMDcuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv L0FwUHBYUlJjdUc5UTFtWHF4elF4SEtvM3VwOFdVdDN0NFY0RW15eHREbkpqLzAv MzIzMDMwMmUzMjMyMzkyZTMyMzMzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy MzczMzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF BQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjl6zANBgkqhkiG9w0BAQsFAAOCAQEAET0O rpuQTSHwQ1nlkX9LtDQPOrrz0bBD6qABKRVmFRr6q2in8PM9KIf6vRJcYNI4We40 8LEP1N2asZyDuv3orXZqctDG6NjmFrL/av8k0ONHgpspO0tCmvICCYeLAJf/Cu/l qfSMgmRJFZWccwGFSn9ZiftpP0jZy3tlHcIbwcs/LWJ9RA8mMMgq93ejSWgXjWIK g0UME8d4RCaif0rBnFV3nlsS4GZaApI98YOEAaRH0j7JonaAE/TSLJrRW8Dp8t/G 4tS1XaH8mV6QkdpRzyY865Y2L0GkFXc5aqK0GINtUZjP+jbOmazHnck/lHZQS+WR RvNZTokRC1NvwbHhbw== -----END CERTIFICATE-----Generated at Mon Mar 2 18:47:12 2026 by rpki-client